IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Vague error : The workflow was terminated by the system due to a function error.

  • 1.  Vague error : The workflow was terminated by the system due to a function error.

    Posted Sat November 26, 2022 08:40 PM
    Edited by Kavi Harjani Sun November 27, 2022 12:15 AM
    I've a workflow that loops based on conditions


    The workflow goes as: There's a sync function which syncs data between 2 tables and I counter over a row of table 1, so exclusive gateway checks if that row data exists in the table 2, and it only pass it to sync function if the data does not exist in table 2,  and at the end when all rows are synced (Count == length of the table) the workflow ends

    Over here, the counter function runs once successfully and then abruptly stops & throws this error
    The workflow was terminated by the system due to a function error.  

    I've tried changing the flow and everything possible, it's breaking around counter function after looping over it once

    The counter function is simple, it just takes the input and adds 1 to it and attaches it to an output which I've named variable count

    I tried removing that as well to see if overwriting variables in workflow would be the cause, but yet it did not work 



    I've tried on a simple workflow as well


    Pre-process script : 
    if 'count' in workflow.properties:
    inputs.number = workflow.properties.count['content']['plus_one']
    else:
    inputs.number = 0

    Output = count



    Could anyone give any ideas on what could be the issue? Thanks




    ------------------------------
    Kavi Harjani
    ------------------------------


  • 2.  RE: Vague error : The workflow was terminated by the system due to a function error.

    Posted Wed November 30, 2022 01:33 AM
    Hi Kavi,

    I got a similar behaviour in one of my playbooks and talked to IBM support about it. I'm not sure if this is exactly for your Error as well but could give a hint. I was told, that apparantly SOAR does not allow multiple Instances of a function at the same time. So maybe your function calls are overlapping and causing this error? Its a wild guess.

    I would try to build a waiting point to make sure the functions can not overlap and test again.

    ------------------------------
    Benjamin Walden
    ------------------------------



  • 3.  RE: Vague error : The workflow was terminated by the system due to a function error.

    Posted Thu December 01, 2022 03:23 PM

    Hi Benjamin,

    Thanks for your reply, I tried it your way

    I tried your suggestion, didn't work for me. So the workflow isn't allowing me to hit the same function twice, even after having middle functions to delay if the execution of it is going on, so basically unable to do loops for now, I'll update this thread if I find any solution to it

    Thanks!



    ------------------------------
    Kavi Harjani
    ------------------------------